Post
Ulises Gascón
ulisesgascon.com
did:plc:rgn3ralkvtzgv5a6f74ee7ba
🚨 Medium-severity security fix in undici (6.26.0, 7.28.0, 8.5.0) just released!
Patches CVE-2026-9679. undici vulnerable to HTTP header injection via Set-Cookie percent-decoding.
https://github.com/nodejs/undici/security/advisories/GHSA-p88m-4jfj-68fv
2026-06-17T16:59:17.472Z